Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: y0KTlO7REFux5VZrICiRL+ujirjraozKc9U6JEaQyTQ=
Subject key identifier: 78:B7:B3:CB:53:E1:E8:32:35:6F:42:E4:8A:69:E8:B1:69:04:BE:24
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 019D386636CC8165368FAA42F1F22C812E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 0878
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: ykMnYfKHVrCukcbyNdKHxMV5mzqUhyTrbbfyfCuviIw=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:36:cc:81:65:36:8f:aa:42:f1:f2:2c:81:2e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=78b7b3cb53e1e832356f42e48a69e8b16904be24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:78:2d:44:47:da:e1:63:97:2a:64:1d:de:
16:76:fe:d1:9e:66:c2:54:5d:7a:13:9c:54:57:a5:
ce:7b:da:f6:72:7b:2c:3d:5f:7c:2f:f0:a6:4f:5d:
af:ca:be:5d:4c:6c:c6:0a:a2:43:77:cf:65:57:de:
b0:27:37:a4:2d:49:63:33:c4:9b:40:6c:35:5a:17:
1c:2e:a2:70:38:96:ad:3a:e0:52:b1:4c:59:c4:1f:
d7:c1:07:25:3c:75:c3:9f:86:de:a5:29:fd:56:52:
2d:f3:01:36:22:4e:43:a4:58:05:72:b8:8a:bf:f2:
3d:c8:fa:97:73:71:e0:74:88:21:d1:e9:8d:2a:c8:
7b:c7:a9:4e:18:85:95:5e:7c:90:e3:b1:f1:a9:b9:
9a:e4:2d:36:2b:d4:b5:fe:b1:a3:c5:83:9a:e1:bc:
8f:5a:ff:85:80:7d:07:c7:ed:ce:90:06:73:dc:7b:
0a:e6:37:08:51:54:9e:f2:de:85:4f:c6:fe:86:a3:
70:ac:c5:0b:c1:56:fe:5f:bd:ec:25:d5:6b:5b:d7:
ef:3d:5b:f9:67:67:f2:2c:af:12:5f:81:ac:58:ba:
83:7d:38:5c:90:1a:2b:55:3c:58:ec:e4:ae:93:96:
ad:5c:6a:cf:18:66:0f:a3:f0:da:a9:a7:02:b6:e8:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:B3:CB:53:E1:E8:32:35:6F:42:E4:8A:69:E8:B1:69:04:BE:24
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:24:c4:96:7f:17:c8:c9:35:da:22:19:2a:4f:a1:80:0a:ae:
dc:bb:36:18:df:44:b4:19:2a:2a:32:7b:00:52:8e:07:d5:a7:
69:96:7d:88:a6:f8:28:83:86:0d:5f:0d:15:a7:8f:9d:4f:db:
de:50:8c:8c:c0:c4:d3:f8:88:35:ce:32:4e:a1:a8:ab:82:d8:
96:af:c3:82:52:e2:35:8f:75:14:5d:77:34:19:b4:dd:07:3b:
07:73:fc:39:64:ad:63:28:78:32:c3:f0:ae:8e:fd:71:eb:2a:
04:0b:75:3e:fa:5f:80:2b:4f:2c:28:26:ef:ec:f5:ff:fc:8a:
ec:00:39:ef:08:7c:09:46:7b:cb:64:d8:bb:0d:34:7c:67:96:
90:7a:65:8c:0c:ad:86:cb:ae:9b:4f:d9:3b:23:ee:87:52:c0:
66:a6:6c:83:9a:fb:31:03:be:9a:45:cd:a3:5a:95:92:79:f2:
0e:ea:b4:a6:1b:1a:53:ef:53:82:ff:d7:83:0f:d9:51:63:e7:
1f:8d:43:13:17:3d:7c:76:3a:64:89:13:7a:ac:fa:29:1c:4c:
fe:ee:28:61:41:f3:aa:a0:e2:5f:6e:f9:c2:66:7f:cf:cf:c8:
5d:52:e9:26:40:42:df:db:c3:25:a5:73:21:00:fb:d9:3f:ae:
8f:39:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:48 2026 by rpki-client